teate-thy-sonic-burne (npm) · Malicious Code
Affects teate-thy-sonic-burneSource GCVE Database
Rated by Threat Radar
Data as of 8 Sep 2026, 14:23 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmteate-thy-sonic-burne | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid installing or depending on 'teate-thy-sonic-burne' version 6.9.9 and related derivative packages. Registry maintainers and security teams should monitor for and remove such autopublished malicious packages to prevent ecosystem pollution.
Description
The npm package 'teate-thy-sonic-burne' version 6.9.9 is part of a token reward campaign that floods the npm registry with malicious packages. These packages contain autopublish scripts that automatically generate and publish derivative packages with randomized names to inflate developer reputation scores for the tea protocol token rewards. The malicious payload modifies package.json files to remove private flags, changes version numbers, and continuously republishes variants, polluting the npm registry.